PYSEC-2021-855

En bref

Publiée: 2021-12-17 19:15 UTC
Mise à jour: 2023-11-08 04:06 UTC
CVE: CVE-2021-34141
Alias: GHSA-fpfv-jqm9-f5jm

Description

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.

Paquets affectés

Paquet	Versions
PyPI · numpy	introduced 1.9.0, fixed 1.10.0

Références

https://github.com/numpy/numpy/issues/18993 REPORT
https://github.com/advisories/GHSA-fpfv-jqm9-f5jm ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — PyPA Advisory Database